Skip to content

Commit 43879ff

Browse files
Remove additional files on cleanup
- system-wide cscli wrapper - /etc/crowdsec orphan directory
1 parent d88a251 commit 43879ff

File tree

1 file changed

+12
-19
lines changed

1 file changed

+12
-19
lines changed

README.md

+12-19
Original file line numberDiff line numberDiff line change
@@ -75,15 +75,6 @@ By default whitelist is enabled to never ban IP on the local network, for test p
7575
runagent -m crowdsec1 cscli parsers remove crowdsecurity/whitelists
7676
systemctl restart crowdsec1
7777

78-
## List Banned IP in nftables sets
79-
80-
Banned IP are contained inside nft sets that you can list by the command line below
81-
82-
- ipv4
83-
`nft list set ip crowdsec crowdsec-blacklists`
84-
- ipv6
85-
`nft list set ip6 crowdsec6 crowdsec6-blacklists`
86-
8778
### cscli
8879

8980
Crowdsec come with a cli tool, available within the application environment. Get a shell with:
@@ -94,7 +85,7 @@ Then run the tool as
9485

9586
cscli --help
9687

97-
- if you want to know on a specific command `cscli <command> --help`
88+
- help on a specific command: `cscli <command> --help`
9889
- get a glance : `cscli metrics`
9990
- see the state of installed bouncers : `cscli bouncers list`
10091
- see the active decisions(ban): `cscli decisions list`
@@ -134,29 +125,31 @@ To uninstall the instance:
134125

135126
remove-module --no-preserve crowdsec1
136127

137-
## Uninstall the crowdsec binary bouncer
128+
## Uninstall the old crowdsec binary bouncer
138129

139130
Previous to the version 1.0.6 the bouncer was installed on the host following a repository method, after this version the bouncer is shipped in a full container.
140131
With the upgrade the service `crowdsec-firewall-bouncer` has been stopped but not removed from the host. For a full cleaning you can
141132

142133
- remove firewalld permanent sets:
143-
`firewall-cmd --permanent --delete-ipset=crowdsec-blacklists`
144-
`firewall-cmd --permanent --delete-ipset=crowdsec6-blacklists`
134+
135+
firewall-cmd --permanent --delete-ipset=crowdsec-blacklists
136+
firewall-cmd --permanent --delete-ipset=crowdsec6-blacklists
145137

146138
- remove the bouncer on rocky linux
147-
`dnf remove -y crowdsec-firewall-bouncer-iptables`
148-
`rm /etc/yum.repos.d/crowdsec_crowdsec.repo`
139+
140+
dnf remove -y crowdsec-firewall-bouncer-iptables
141+
rm -rvf /etc/yum.repos.d/crowdsec_crowdsec.repo /etc/crowdsec /usr/local/sbin/cscli
149142

150143
- remove the bouncer on debian
151-
`apt-get -y remove crowdsec-firewall-bouncer-iptables`
152-
`rm /etc/apt/sources.list.d/crowdsec_crowdsec.list`
144+
145+
apt-get -y remove crowdsec-firewall-bouncer-iptables
146+
rm -rvf /etc/apt/sources.list.d/crowdsec_crowdsec.list /etc/crowdsec /usr/local/sbin/cscli
153147

154148

155149
## Testing
156150

157151
Test the module using the `test-module.sh` script:
158152

159-
160153
./test-module.sh <NODE_ADDR> ghcr.io/nethserver/crowdsec:latest
161154

162155
The tests are made using [Robot Framework](https://robotframework.org/)
@@ -168,4 +161,4 @@ Translated with [Weblate](https://hosted.weblate.org/projects/ns8/).
168161
To setup the translation process:
169162

170163
- add [GitHub Weblate app](https://docs.weblate.org/en/latest/admin/continuous.html#github-setup) to your repository
171-
- add your repository to [hosted.weblate.org]((https://hosted.weblate.org) or ask a NethServer developer to add it to ns8 Weblate project
164+
- add your repository to [hosted.weblate.org](https://hosted.weblate.org) or ask a NethServer developer to add it to ns8 Weblate project

0 commit comments

Comments
 (0)